Drata vs. OneTrust Tech Risk & Compliance

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Drata
Score 5.5 out of 10
N/A
Drata is a security and compliance automation platform with the mission to help companies earn and keep the trust of their users, customers, partners, and prospects. Drata helps companies streamline their SOC 2, ISO 27001, HIPAA, and PCI DSS compliance through continuous, automated control monitoring and evidence collection, to drive lower costs and time spent preparing for annual audits. The company is backed by ICONIQ Growth, Alkeon, Salesforce Ventures, GGV Capital, Okta Ventures, SVCI…
$7,500
per year
OneTrust Tech Risk & Compliance
Score 9.3 out of 10
Small Businesses (1-50 employees)
Automated governance with business-ready content, guidance, and mapping. A solution to turn complex regulations into simple, actionable tasks that fit into any existing processes, ensuring continuous compliance.
$500
per year
Pricing
DrataOneTrust Tech Risk & Compliance
Editions & Modules
Starter
$7500
per year
Growth
$15,000
per year
Enterprise
Custom
Essentials
$500
per year
Startup
$3,000
per year
Growth
$10,000
per year
Midsize
$17,500
per year
Enterprise
Custom
Offerings
Pricing Offerings
DrataOneTrust Tech Risk & Compliance
Free Trial
NoYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional DetailsMonthly plans available. During the onboarding process, you can easily transfer your existing set of policies into Tugboat Logic. This also gives you the opportunity to update or supplement your existing policies with current industry standards. If you need a little more than the normal support we provide, additional services are available from Tugboat Logic. Contact us for more details. Visit our pricing page on our website for more details.
More Pricing Information
User Ratings
DrataOneTrust Tech Risk & Compliance
Likelihood to Recommend
-
(0 ratings)
7.4
(0 ratings)
User Testimonials
DrataOneTrust Tech Risk & Compliance
Likelihood to Recommend
No answers on this topic
OneTrust is well suited for mid-scale IT industries and mid-size infrastructure. OneTrust is excellent in Data privacy and Cookie compliance. And lLess appropriate for large-scale enterprise risk management. It is SSO and ADFS enabled. OneTrust is having great capabilities to integrate with other APIs and third-party security software.
Read full review
Pros
No answers on this topic
  • Module wise implementation.
  • Very reasonable price structure.
  • Easy and speedy to implement.
  • Product roadmap.
Read full review
Cons
No answers on this topic
  • Documentation chasing for assessments is not as automated or hands-off as demos made it seem.
  • Getting custom risk matrix set up required professional onboarding.
  • Platform is less than intuitive.
  • Pricing is module dependent and demos do not highlight which module is included in which workflow.
Read full review
Alternatives Considered
No answers on this topic
OneTrust is more focused on providing an assessment platform than a vendor risk monitoring platform. This difference is why we chose OneTrust. For some, this will be a failure of the product. However, if you take the time to define risk for your organization based on the sensitivity of the data and the inherent risks of a vendor based on infrastructure you will create a unique and understandable metric for risk according to your organization. This adaptability is the strongest feature of OneTrust.
Read full review
Return on Investment
No answers on this topic
  • More uniform vendor assessments.
  • Defensible numeric metrics reflecting risk.
  • Centralized document repository for audit proofs.
Read full review
ScreenShots